最新的CheckPoint Certification認證 156-310考試題庫

問題1

If a resource is specified in the Services field of a Rule Base, which of the following occurs?

A. SecureClient users attempting to connect to the object defined in the Destination column of the rule will receive a new Desktop Policy from the resource.

B. All packets matching the resource service will by analyzed based on resource properties.

C. Users attempting to connect to the object defined in the Destination column of the rule will be required to authenticate.

D. All packets matching that rule are either encrypted or decrypted by the defined resource.

E. All packets that match the resource will be dropped.

正確答案: B

問題2

When using an "other" load balancing server type it uses NAT to convert the logical server address to a real server address. The NAT rules have to be configured manually. True or false?

A. False

B. True

正確答案: A

說明：（僅 VCESoft 成員可見）

問題3

Where would you configure a user defined alert command?

A. Use the policy pull down menu, choose properties, select "log and alert" tab.

B. In global properties select the "Open security extensions" page.

C. In global properties select the "log and alert" page.

D. In global properties select the "log" page.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題4

Which of the following statements, about Hybrid Ike, are FALSE? Choose two.

A. TCP/IP headers are encrypted along with the payload.

B. SecureClient and Hybrid Ike are incompatible

C. Only pre-shared secrets or certificates may be used.

D. The final packet size is increased after it is encrypted

E. Any authentication mechanism supported by VPN-1/Firewall-1 is supported.

正確答案: B,C

問題5

What is true about the Secure Client users ability to disable policy on the desktop?
(Choose all that apply)

A. The user cannot disable it by default.

B. The default state can be changed by configuring the "manual_slan_control" option in userc.c.

C. The user can disable it by default.

D. The default state can be changed by configuring the "manual_slan_control" option in objects.c.

正確答案: B,C

說明：（僅 VCESoft 成員可見）

問題6

Which of the following happens if the userc.C syntax is incorrect? (Choose all that apply)

A. No error messages are displayed.

B. The desktop will be disabled.

C. The site to which the wrong parameter belongs is deleted.

D. An appropriate error message is displayed.

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題7

Determine the appropriate routing mode for a Voice over IP (VoIP) Domain Gateway object that supports Q.931.

A. Direct and Call Control

B. Direct

C. Call Setup

D. Call Setup and Call Control

E. Call Proxy and Call Control

正確答案: C

說明：（僅 VCESoft 成員可見）

問題8

MEP VPN's support both SecuRemote and Secure Client connections. True or false?

A. False

B. True

正確答案: A

說明：（僅 VCESoft 成員可見）

問題9

When configuring a new user with AMC which options are available to restrict the times at which the user is allowed to connect? (Choose all that apply)

A. Start and end time of day

B. Month of year

C. Year

D. Day of week

正確答案: A,D

說明：（僅 VCESoft 成員可見）

問題10

FW1 provides content security for which of the following resources? (Choose all that apply)

A. SNMP

B. HTTP

C. FTP

D. SMTP

E. Telnet

正確答案: B,C,D

說明：（僅 VCESoft 成員可見）

問題11

Which is a valid distinguished name for a LDAP database?

A. o=joe bloggs, c=company inc, cn=us

B. c=joe bloggs, cn=company inc, o=us

C. cn=joe bloggs, o-company inc, c=us

D. cn=joe bloggs, o=company inc, c=us

正確答案: D

說明：（僅 VCESoft 成員可見）

問題12

In which tab of an SMTP definition screen would you specify the maximum size of an email to be allowed through when using content security?

A. Action 1

B. General

C. Action 2

D. Match

正確答案: C

說明：（僅 VCESoft 成員可見）

最新的CheckPoint Check Point CCSE NG - 156-310免費考試真題

最新更新

站內鏈接

聯系我們